Secure Access Client vulnerabilities
10 known vulnerabilities in Secure Access Client from Ivanti. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Secure Access Client: Improper Certificate Validation
An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.
- 7.8 High severity
Secure Access Client: Incorrect Permission Assignment for Critical Resource
Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
- 7.1 High severity
Secure Access Client: Privilege Defined With Unsafe Actions
Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files.
- 7.3 High severity
Secure Access Linux: Improper Privilege Management
A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute code as root.
- 7.8 High severity
Client: Improper Limitation of a Pathname to a Restricted Directory
Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Pulse Secure Client. An attacker must first obtain the ability to execu
- 7.8 High severity
Secure Access: Incorrect Default Permissions
When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file.
- 7.8 High severity
Secure Access Client Windows: Allocation of Resources Without Limits or Throttling
A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine.
- 7.8 High severity
Secure Access Client Windows: Uncontrolled Resource Consumption
A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine a
- 7.8 High severity
Secure Access Client: Incorrect Default Permissions
A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, den
- 7.0 High severity
Secure Access Client: Time-of-check Time-of-use (TOCTOU) Race Condition
A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system.